Why not make it easier on yourself and use Sysprep or an unattended install to deploy Windows in a more hands-free (and automatically patched) fashion?

Or, at least, you could download the patches you care about (the critical CRITICAL updates) from Windows Update, store them on a CD, and patch workstations before you even take them online.

In the struggle to keep Windows PCs patched and secure, if you don’t get organized, you’ll get burned. (And it usually ends up saving time, too.)